Cyber Security Architect/Engineer III

Key Responsibilities

• Design, deploy, configure, and maintain enterprise Splunk Enterprise environments across hybrid cloud and on-premises infrastructure.
• Architect scalable logging, monitoring, alerting, and reporting solutions that support enterprise cybersecurity and operational monitoring.
• Develop and optimize complex Splunk Search Processing Language (SPL) searches, dashboards, reports, and correlation rules.
• Manage Splunk knowledge objects including fields, field extractions, lookups, event types, tags, macros, aliases, workflow actions, and configuration files.
• Design and implement automated workflows using scripting, REST APIs, and configuration management to improve operational efficiency.
• Troubleshoot complex data ingestion, indexing, parsing, forwarding, and performance issues across enterprise environments.
• Perform Splunk platform upgrades, patching, performance tuning, health monitoring, and capacity planning.
• Integrate Splunk with cloud platforms including AWS, Microsoft Azure, and Google Cloud Platform (GCP).
• Implement and maintain secure Splunk architectures utilizing role-based access control (RBAC), security best practices, and compliance standards.
• Support onboarding of new data sources, users, applications, and enterprise security use cases.
• Collaborate with cybersecurity, DevOps, infrastructure, and engineering teams to improve enterprise observability and threat detection capabilities.
• Mentor junior engineers and provide technical leadership across Splunk engineering initiatives.
• Participate in planned maintenance windows, including occasional after-hours and weekend support.

Required Skills/Education

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, Engineering, or a related technical discipline.
• Candidates with a non-related degree must possess four additional years of relevant professional experience.
• Minimum 8 years of overall IT experience supporting enterprise infrastructure, cybersecurity, or observability platforms.
• Minimum 5 years of hands-on Splunk Enterprise engineering and administration experience.
• Extensive experience designing, deploying, configuring, and maintaining large-scale enterprise Splunk environments.
• Advanced proficiency writing complex Splunk SPL searches, dashboards, alerts, reports, and visualizations.
• Experience managing Splunk knowledge objects and configuration files across recent Splunk Enterprise releases.
• Strong experience with Splunk deployment architecture, indexing, forwarding, clustering, search heads, and configuration management.
• Experience integrating Splunk using REST APIs and external systems.
• Strong analytical and troubleshooting skills with expertise in resolving data ingestion, parsing, indexing, and search performance issues.
• Experience developing automation workflows and operational dashboards.
• Excellent written and verbal communication skills with the ability to communicate technical concepts to technical and executive stakeholders.
• Self-motivated with strong problem-solving skills and the ability to work independently.

About Seneca Resources

Seneca Resources is a trusted career partner that provides opportunities for professionals to grow their careers while making an impact. We invest in our employees' success, celebrate their achievements, and connect them to meaningful work with leading organizations nationwide. As an Equal Opportunity Employer, Seneca Resources fosters a diverse and inclusive workplace where all qualified individuals are encouraged to apply.